 asoto-r7
|
c27c149a4d
|
Land #10947, HPE Intelligent Management Center Java Deserialization RCE
|
2018-12-03 17:07:31 -06:00 |
|
|
William Vu
|
ab8df35645
|
Add module doc
|
2018-12-01 12:05:08 -06:00 |
|
|
Jacob Robles
|
dec08a0b43
|
Land #10954, apache spark unauth rce module
|
2018-11-29 13:56:21 -06:00 |
|
|
Jacob Robles
|
5180ec4cf8
|
Update documentation
Fix headers and remove options output
|
2018-11-29 08:28:39 -06:00 |
|
|
h00die
|
e3e7285288
|
Land #9946 a UEB local priv escalation
|
2018-11-27 21:19:34 -05:00 |
|
|
h00die
|
38a99ac90a
|
ueb privesc updates
|
2018-11-27 21:18:05 -05:00 |
|
|
h00die
|
4af5ab3089
|
ueb privesc updates
|
2018-11-27 21:14:05 -05:00 |
|
|
Brendan Coles
|
180876d8fc
|
Add check for SMAP
|
2018-11-27 23:24:02 +00:00 |
|
|
Brent Cook
|
b05bb616bf
|
Land #10987, add exploit for PHP imap_open function against various web apps
|
2018-11-27 16:44:51 -06:00 |
|
|
Brent Cook
|
66cae6240f
|
Land #10994, Added exploit for CVE-2018-18955
|
2018-11-27 16:12:05 -06:00 |
|
|
Shelby Pace
|
6712363bb5
|
Land #10737, add TeamCity XML-RPC exploit module
|
2018-11-27 14:59:37 -06:00 |
|
|
Shelby Pace
|
064c79a4ae
|
note about cmd_stager flavor
|
2018-11-27 14:46:19 -06:00 |
|
|
Wei Chen
|
d523124faf
|
Land #10965, Add the macOS LPE from pwn2own2018 (CVE-2018-4237)
|
2018-11-27 14:00:35 -06:00 |
|
|
Brendan Coles
|
c1722a922f
|
Fix markdown
|
2018-11-27 19:43:08 +00:00 |
|
|
Brendan Coles
|
aae86241ef
|
Update version check
|
2018-11-27 18:13:29 +00:00 |
|
|
Brent Cook
|
0fddb8e31c
|
Land #10768, Exploit for Netgear CVE-2016-1555
|
2018-11-26 11:45:10 -06:00 |
|
|
h00die
|
e2d58afe13
|
cleaned up code, added custom
|
2018-11-25 10:59:53 -05:00 |
|
|
Brendan Coles
|
be6cfde921
|
Land #11015, Fix payload and console check for Xorg_privesc Linux targets
|
2018-11-25 04:51:27 +00:00 |
|
|
Brendan Coles
|
01ed57cbb3
|
Remove check for nosuid
|
2018-11-25 01:53:07 +00:00 |
|
|
Brendan Coles
|
f0999e3a7e
|
Add documentation
|
2018-11-25 00:54:58 +00:00 |
|
|
Aaron Ringo
|
1783617770
|
consolelock check updated to use id, payload upload changed, documentation updated, misc formatting
|
2018-11-24 15:10:21 -06:00 |
|
|
h00die
|
945755b058
|
add custom php_imap target
|
2018-11-24 14:18:13 -05:00 |
|
|
h00die
|
45f2c5beb2
|
update php_imap_open docs
|
2018-11-24 07:26:42 -05:00 |
|
|
h00die
|
e36cef3b96
|
e107 exploitable now
|
2018-11-23 20:16:53 -05:00 |
|
|
Brent Cook
|
a59913434d
|
Land #10916, Xorg SUID privesc
|
2018-11-21 19:46:11 -06:00 |
|
|
h00die
|
4c59a271e2
|
added suitecrm to imap_open exploit
|
2018-11-20 18:33:42 -05:00 |
|
|
Brent Cook
|
d5d8216377
|
Land #10977, Add documentation and some enhancement to freesshd_authbypass module
|
2018-11-20 11:44:49 -06:00 |
|
|
Tim W
|
0649ad9876
|
add documentation
|
2018-11-20 16:09:18 +08:00 |
|
|
h00die
|
aca3f44c9b
|
fix markdown formatting
|
2018-11-18 21:38:25 -05:00 |
|
|
h00die
|
4b09584047
|
php_imap_open_rce
|
2018-11-18 21:28:19 -05:00 |
|
|
Carsten Maartmann-Moe
|
eab26a04c3
|
Added documentation
|
2018-11-17 09:55:41 +01:00 |
|
|
Imran E. Dawoodjee
|
0edd3a9138
|
Fixed numbering error in documentation.
|
2018-11-16 21:34:05 +08:00 |
|
|
Imran E. Dawoodjee
|
08b3efa046
|
Enhanced module and added documentation.
|
2018-11-16 21:18:45 +08:00 |
|
|
Jacob Robles
|
795aa3c99c
|
Land #10828, git submodule url exec CVE-2018-17456
|
2018-11-14 12:39:13 -06:00 |
|
|
Aaron Ringo
|
4fc047db87
|
Added advanced option to check console lock on linux systems, default true & updated docs
|
2018-11-13 22:33:12 -06:00 |
|
|
Shelby Pace
|
ac8932c144
|
update 9631 to a current branch
|
2018-11-13 15:15:25 -06:00 |
|
|
Aaron Ringo
|
538055c406
|
Initial documentation for Xorg Privesc Module
killed white spaces
|
2018-11-12 15:44:13 -06:00 |
|
|
Green-m
|
3be917d0e4
|
Add doc for exploit module spark_unauth_rce.
|
2018-11-12 17:08:36 +08:00 |
|
|
Brendan Coles
|
1f14a9846d
|
Land #10767, Add Cisco Prime Infrastructure remote root exploit
|
2018-11-10 17:08:16 +00:00 |
|
|
Wei Chen
|
a32d8083f0
|
Land #10847 - Add blueimp's jQuery (Arbitrary) File Upload
CVE-2018-9206
|
2018-11-05 11:37:20 -06:00 |
|
|
Brent Cook
|
86469cc5a0
|
Land #10836, Add Morris worm sendmail debug mode exploit
|
2018-11-02 11:17:33 -05:00 |
|
|
Brent Cook
|
1d81f3764f
|
Land #10700, Add Morris worm fingerd exploit and VAX reverse shell
|
2018-11-02 11:16:46 -05:00 |
|
|
Shelby Pace
|
6f58a15e00
|
removed template line
|
2018-10-24 15:14:15 -05:00 |
|
|
Shelby Pace
|
cecc7177f7
|
added documentation for modules
|
2018-10-24 09:47:05 -05:00 |
|
|
William Vu
|
bf5fe2864f
|
Update module doc
|
2018-10-23 16:28:49 -05:00 |
|
|
William Vu
|
326597e842
|
Update module doc with new output
|
2018-10-23 07:14:19 -05:00 |
|
|
William Vu
|
3d06c10ad0
|
Link to Apache AllowOverride directive and change
|
2018-10-23 03:51:16 -05:00 |
|
|
William Vu
|
a55f7ff30a
|
Clarify vuln (re)discovery vs. disclosure
https://www.bleepingcomputer.com/news/security/jquery-file-upload-plugin-vulnerable-for-8-years-and-only-hackers-knew/
|
2018-10-23 03:22:45 -05:00 |
|
|
William Vu
|
df23507772
|
Add module doc
|
2018-10-22 23:35:42 -05:00 |
|
|
William Vu
|
f40647b2a4
|
Link to Docker environment in module doc
|
2018-10-22 18:32:37 -05:00 |
|